PT-2026-57939 · Sap Se · Sap Hana Extended Application Services Classic Model

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-44753

Mitre

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts, resulting in low impact on confidentiality, with no impact on integrity and availability of the application.

Correção

Enumeração de Fraquezas

CWE-204

Identificadores relacionados

CVE-2026-44753

Produtos afetados

Sap Hana Extended Application Services Classic Model

Referências · 3

• https://url.sap/sapsecuritypatchday · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44753 · Nota de Segurança
• https://me.sap.com/notes/3732522 · Nota